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Amendments to the Claims : 

A listing of the entire set of pending claims (including amendments to the claims, if 
any) is submitted herewith per 37 CFR 1,121. This listing of claims will replace all prior 
versions, and listings, of claims in the application. 

Listing of Claims: 

1. (Currently amended) A method for cryptographically converting an input data block into an 
output data block; the method including: 

selecting a select permutation from a predetermined set of at least two permutations. 

and 

performing a non-linear substitution operation on the input data bloc k using an S box 
based on ar -the select p ermutatio n, wher e in the method includ e s e noh tim a b e fore n s m g- rii fi p ., 
box (pa e udo - Randomly s e l e cting th e pormirtation from a pr e determined set of at loaGt two 
p e rmutations as s ociat e d with th e S box . 

2* (Original) A method as claimed in claim 1, wherein the set of permutations is formed such 
that a cryptographic weakness in one of the permutations of the set is at least partially 
compensated by a corresponding cryptographic strength in at least one of the other 
permutations of the set. 
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3. (Currently amended) A method as claimed in claim I , wherein 
the data block consists of n data bits and 

each e l e m e nt permutation of the set of permutations is u permutation on a set of 2" 
elements, represented by Z^ Vwherc each non-trivial differential characteristic of each 
permutation in this set has a probabilit y that is less than or equal to a maximum probability^ 
at most Pt Uff\ 

the set of permutations being formed by permutations which have been selected such 
that for each non-trivial differential characteristi chaying the maximum probata litv- wkh 



probability4ew0f-thafHp^in at least one of the other permutations of the set 

4. (Original) A method as claimed in claim 3, wherein the differential characteristic has a 
probability equal to ^ero in at least one of the permutations. 

5. (Currently amended) A method as claimed in claim 4, wherein n = 4, and-gj^-^ the 
maximum probability equals V*. 

6. (Currently amended) A method as claimed in claim 1 , wherein 

the data block consists of n data bits and 

each element permutation of the set of permutations i s a p e rmutation on a set of T 
elements, r e pr e s e nt e d by Z^ -where each non-trivial linear characteristic of each permutation 
in this set has a probability of at least Vi — #^-a minimum probability and at most-^4-^/^ 
maximum probability, 

the set of permutations being formed by permutations which have been selected such 
that for each non-trivial linear characteristic with probability of Yr- oi^-ov V* * y Jin - that equals 
the minimum or maximum probability in any of the permutations, this linear characteristic has 
a probability closer to Vi in at least one of the other permutations of the set, 

7. (Currently amended) A method as claimed in claim-Sji, wherein the linear characteristic 
has a probability equal to Yn in at least one of the permutations. 
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8. (Currently amended) A method as claimed in claim 6, wherein n = 4 nnd -ff& w ~==- & the 
minimum probability is andjthe maximum probability is 3 A , 

9. (Original) A method as claimed in claim 1, wherein the set of permutations consists of two 
permutations. 

10. (Currently amended) A method as claimed in claim 1, wherein including performing tho 
s e l e ction of 

selecting the select permutation und e r control of is based on an encryption key. 

1 1 . (Currently amended) A method as claimed in claim 9, wherein tee- s e l e ction of the 

selecting the p ermutation is performed under control of eee-a^bit of &e-an encryption 

key, 

J 2. (Original) A computer program product where the program product is operative to cause a 
processor to perform the method of claim 1. 

] 3, (Currently amended) A system for cryptographically converting an input data block into 
an output data block; the method system including: 

- an input for receiving the input data block; 

- a storage for storing a predetermined set of at least two permutations associated with 
an S-box; 

- a cryptographic processor for performing a non-linear operation on the input data 
block using an S-box based on a permutation; the processor being operative to, each time 
before using the S-box, (pseudo-)randomly selecting the permutation from the stored set of 
permutations associated with the S-box; and 

- an output for outputting the processed input data block. 
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!4. (New) A cryptographic encoder comprising: 
one or more encryption stages, 

each stage of the one or more encryption stages including 

a non-linear substitution module that is configured to receive a control signal 
and a set of data bits, 
wherein 

the non-linear substitution module includes a plurality of substitution boxes; and 
each of the substitution boxes is configured to receive at least a subset of the control 
signal and a subset of the set of data bits, and; 

substitutes a first output value for the subset of the set of data bits if the subset 
of the control signal is a first value, and 

substitutes a second output value for the subset of the set of data bits if the 
subset of the control signal is a second value. 

15. (New) The cryptographic encoder of claim 1 4, wherein 

each stage of the one or more encryption stages further includes 

an addition module that is configured to combine at least a subset of a key with 
a data input to provide the set of data bits to the non-linear substitution module. 

16. (New) The cryptographic encoder of claim 15, wherein 

the control signal includes another subset of the key. 

17. (New) The cryptographic encoder of claim 15, wherein 

each stage of the one or more encryption stages further includes 

a transformation module that is configured to transform the output values from 
the substitution boxes to provide therefrom an encrypted data output. 



Atty. Docket No. NL-000365 



NL-000365 Amendmenl 4,B23 



PAGE 5/11 9 RCVD AT 2/8/2005 12:19:59 PM [Eastern Standard Time] * 8VR:USPT0-EFXRF-1/1 * DNIS:8729306* CSID:21 52437525* DURATION (mm-SS):03-34 



FEB T 0Q-2005 IS: 20 FROM: ROBERT M. MCDERMOTT 2152437525 



TO:USPTO 



P.6'11 



Appl. No. 09/896,197 Page 6 of 11 

Amendment and/or Response 

Reply to Office action of 23 November 2004 

1 8. (New) The cryptographic encoder of claim 14, wherein 

the second output value is formed such that a cryptographic weakness in the first value 
is at least partially compensated by a corresponding cryptographic strength in the second 
output value. 

19. (New) The cryptographic encoder of claim 14, wherein 

the subset of the set of data bits consists of n data bits and 

each of the first and second data output values is a mapping of the subset of the set of 
data bits to an element of a set of 2" elements, where each non-trivial differential 
characteristic of each of the set of 2 n elements of the first and second output values has a 
probability that is less than or equal to a maximum probability; 

the set of 2" elements that provide second data output value being selected such that 
for each non-trivial differential characteristic having the maximum probability in the set of 2" 
elements that provide the first output value, this differential characteristic has a lower 
probability in the set of 2" elements that provide second data output value. 

20. (New) The cryptographic encoder of claim 14, wherein 

the subset of the set of data bits consists of n data bits and 

each of the first and second data output values is a mapping of the subset of the set of 
data bits to an element of a set of 2" elements, where each non-trivial differential 
characteristic of each of the set of 2" elements of the first and second output values has a 
probability that is at least a minimum probability and at most a maximum probability; 

the set of 2" elements that provide second data output value being selected such that 
for each non-trivial linear characteristic that equals the minimum or maximum probability in 
the set of 2" elements that provide the first output value, this linear characteristic has a 
probability closer to Yz in the set of 2" elements that provide second data output value. 
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